Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          2RpDkNQS39MPVH9vFf6m7WgDIjexgfpetAMUe707om8=
Subject key identifier:   79:20:01:DF:AC:3D:BE:A9:FC:6A:97:CD:9B:85:58:40:81:21:B8:CB
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3DA3710CDD5AF1EEC04E98CFA4EC2B5BBB813C42
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:03 +0000
ROA not before:           Thu 06 Jun 2024 19:48:03 +0000
ROA not after:            Thu 05 Jun 2025 19:53:03 +0000
asID:                     52468
IP address blocks:        187.108.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a3:71:0c:dd:5a:f1:ee:c0:4e:98:cf:a4:ec:2b:5b:bb:81:3c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:03 2024 GMT
            Not After : Jun  5 19:53:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:16:ae:c5:09:67:41:a1:34:0b:26:d2:a0:
                    75:7b:a2:21:66:35:9c:ae:d1:87:74:c7:49:b4:0c:
                    b4:9b:ff:95:25:a4:2c:4a:00:18:02:ac:11:28:ec:
                    d5:c5:48:c8:06:6a:ad:a8:0f:e4:e7:c0:aa:6f:05:
                    5a:ef:fb:41:6e:67:3c:31:83:95:a0:9b:6c:91:3a:
                    a1:29:b4:25:f6:07:bb:7f:73:12:f6:28:50:7b:a6:
                    11:bf:cf:ee:dd:ad:03:a2:92:7d:7e:d0:d2:5f:72:
                    6f:9f:b6:c4:7a:a4:5b:39:ce:d9:19:8e:40:b4:26:
                    d3:ca:c8:7d:1b:7b:29:6f:db:6d:d6:2e:10:60:f6:
                    df:a7:b5:05:53:40:13:44:10:69:42:40:3c:c2:44:
                    ac:df:28:57:ff:ab:96:bb:02:2e:89:72:62:36:22:
                    13:9a:2b:aa:21:e2:96:f4:0a:cd:18:98:80:33:1d:
                    52:53:c7:f0:8f:d2:c9:0e:31:ac:6f:1e:05:4a:fc:
                    ca:bc:fd:70:dd:d1:c5:67:24:53:2a:0b:d7:5b:51:
                    09:18:ca:ed:0a:1b:a5:82:92:ba:4e:82:7e:b0:f6:
                    77:2c:2d:15:9d:57:f4:ee:52:00:ac:76:bf:be:c2:
                    34:d5:8b:4f:8f:fa:75:f3:2c:98:86:c9:97:64:93:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:01:DF:AC:3D:BE:A9:FC:6A:97:CD:9B:85:58:40:81:21:B8:CB
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:21:25:e9:9d:4c:bd:68:64:35:9e:a1:78:85:ab:c3:58:
         7a:0b:ab:ee:99:7e:2c:99:12:f6:2a:e4:d0:88:a9:f5:1b:f1:
         03:e7:be:d4:aa:d9:31:0e:6d:7c:b6:7c:5e:c2:81:03:8b:e0:
         1a:89:15:1d:e0:d6:e7:df:60:6a:f6:73:2a:85:ab:ea:35:ca:
         07:e5:0c:65:6a:0b:a8:58:aa:4d:23:f6:1d:5b:3b:ae:84:44:
         46:95:75:e2:d3:24:0f:c6:80:f6:57:3b:27:9f:14:bb:bf:ac:
         a4:99:54:bc:42:9f:f1:ce:7f:f4:fa:d7:b3:43:92:f1:80:21:
         68:06:35:62:f2:b4:df:37:fa:d1:8f:88:f9:f3:d7:41:37:f3:
         3e:b8:51:2d:25:26:9f:68:65:14:80:a7:79:8a:77:ff:69:9c:
         47:e4:88:ca:51:aa:86:a5:29:ba:b7:67:5b:e5:b3:c4:fe:3a:
         10:d9:e3:81:3f:7a:2c:aa:4d:f5:67:10:2e:57:28:08:27:af:
         02:0e:1a:ec:4f:e7:90:11:bb:25:cb:1c:bb:92:89:76:a1:14:
         8c:d5:0f:b2:70:37:89:7d:46:01:d2:af:22:f0:ef:81:0d:59:
         93:37:55:4e:8b:2e:57:19:8d:01:e7:58:cb:4f:9d:5e:fd:2c:
         a7:0c:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:56 2024 by rpki-client on console-fra.rpki-client.org